-
Notifications
You must be signed in to change notification settings - Fork 12
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
stSync stable #27
stSync stable #27
Conversation
Plus: Fixes lint issues: - Can't run linter goanalysis_metalinter: goanalysis_metalinter: buildir: package "netip" (isInitialPkg: false, needAnalyzeSource: true): in net/netip.AddrFromSlice: cannot convert Load <[]byte> t0 ([]byte) to [4]byte Warnings: WARN [runner] The linter 'structcheck' is deprecated (since v1.49.0) due to: The owner seems to have abandoned the linter. Replaced by unused. WARN [runner] The linter 'deadcode' is deprecated (since v1.49.0) due to: The owner seems to have abandoned the linter. Replaced by unused. WARN [runner] The linter 'varcheck' is deprecated (since v1.49.0) due to: The owner seems to have abandoned the linter. Replaced by unused. Signed-off-by: Spolti <fspolti@redhat.com>
[RHODS-12555] - CVE-2023-44487
Specify and link python38 to fix build/test failures due to the wrong Python version (3.6) being used from base image. --------- Signed-off-by: Rafael Vasquez <raf.vasquez@ibm.com>
fix: Specify Python 3.8 in Dockerfile (opendatahub-io#34)
Signed-off-by: Spolti <fspolti@redhat.com>
Fix github.com/elazarl/goproxy Denial of Service
Plus: Fixes lint issues: - Can't run linter goanalysis_metalinter: goanalysis_metalinter: buildir: package "netip" (isInitialPkg: false, needAnalyzeSource: true): in net/netip.AddrFromSlice: cannot convert Load <[]byte> t0 ([]byte) to [4]byte Warnings: WARN [runner] The linter 'structcheck' is deprecated (since v1.49.0) due to: The owner seems to have abandoned the linter. Replaced by unused. WARN [runner] The linter 'deadcode' is deprecated (since v1.49.0) due to: The owner seems to have abandoned the linter. Replaced by unused. WARN [runner] The linter 'varcheck' is deprecated (since v1.49.0) due to: The owner seems to have abandoned the linter. Replaced by unused. Signed-off-by: Spolti <fspolti@redhat.com>
Specify and link python38 to fix build/test failures due to the wrong Python version (3.6) being used from base image. --------- Signed-off-by: Rafael Vasquez <raf.vasquez@ibm.com> Signed-off-by: Spolti <fspolti@redhat.com>
Signed-off-by: Spolti <fspolti@redhat.com>
Add configuration file for CodeQL vulnerability scanning. Signed-off-by: Christian Kadner <ckadner@us.ibm.com> Signed-off-by: Spolti <fspolti@redhat.com>
…b-io#30) Issues addressed: - https://github.com/kserve/rest-proxy/security/dependabot/1 - https://github.com/kserve/rest-proxy/security/dependabot/2 - https://github.com/kserve/rest-proxy/security/dependabot/3 - https://github.com/kserve/rest-proxy/security/dependabot/4 - https://github.com/kserve/rest-proxy/security/dependabot/5 - https://www.cve.org/CVERecord?id=CVE-2023-37788 --------- Signed-off-by: Spolti <fspolti@redhat.com>
- Remove the linters for "deadcode", "structcheck", "varcheck" - Use "os" packages instead of deprecated "io/ioutil" (SA1019) - Capture pre-commit output in a local log file --------- Signed-off-by: Spolti <fspolti@redhat.com>
chore: Fixes google.golang.org/protobuf Stack-based Buffer Overflow https://security.snyk.io/vuln/SNYK-GOLANG-GOOGLEGOLANGORGPROTOBUFENCODINGPROTOJSON-6137908 Signed-off-by: Spolti <fspolti@redhat.com>
chore: address the following CVE: - [CVE-2023-48795](https://www.cve.org/CVERecord?id=CVE-2023-48795): golang.org/x/crypto Authentication Bypass by Capture-replay --------- Signed-off-by: Spolti <fspolti@redhat.com>
Signed-off-by: Filippe Spolti <filippespolti@gmail.com>
sync kserve/rest-proxy with odh/rest-proxy
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: spolti The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Signed-off-by: Filippe Spolti <filippespolti@gmail.com>
/close |
@spolti: Closed this PR. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
* Pre-install grpc-gateway plugin in developer Docker image * Add `generate` make target to run protoc and download required .proto files * Add developer instructions to README.md --------- Signed-off-by: Christian Kadner <ckadner@us.ibm.com>
Description
How Has This Been Tested?
Merge criteria: